apt73
Also known as: basheFirst seen April 22, 2024Active157 claimed victims
The claims below are reproduced as posted by apt73 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field. According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit. Source: https://github.com/crocodyli/ThreatActors-TTPs
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| melhorcompraclube.com.br | December 9, 2024 | ransomware_live | — |
| www.aliorbank.pl | December 5, 2024 | ransomware_live | — |
| azpay.me | December 5, 2024 | ransomware_live | — |
| www.certifiedinfosec.com | December 4, 2024 | ransomware_live | — |
| www.siapenet.gov.br | December 3, 2024 | ransomware_live | — |
| www.sansirostadium.com | November 30, 2024 | ransomware_live | — |
| www.polleninformation.at | November 27, 2024 | ransomware_live | — |
| www.sella.eng.br | November 26, 2024 | ransomware_live | — |
| www.netromsoftware.ro | November 25, 2024 | ransomware_live | — |
| lgpunjab.gov.in | November 23, 2024 | ransomware_live | — |
| gureco.pl | November 23, 2024 | ransomware_live | — |
| rao.hr | November 20, 2024 | ransomware_live | — |
| www.protectasecurity.pe | November 18, 2024 | ransomware_live | — |
| nanolive.ch 2.0 | November 13, 2024 | ransomware_live | — |
| emefarmario.com.br | November 9, 2024 | ransomware_live | — |
| www.botiga.com.uy | November 8, 2024 | ransomware_live | — |
| www.baldinger-ag.ch | November 8, 2024 | ransomware_live | — |
| www.lamaisonducitron.com | November 8, 2024 | ransomware_live | — |
| liftkits4less.com | November 8, 2024 | ransomware_live | — |
| sokkakreatif.com | October 29, 2024 | ransomware_live | — |
| www.scopeset.de | October 29, 2024 | ransomware_live | — |
| www.trinitesolutions.com | October 29, 2024 | ransomware_live | — |
| hpecds.com | October 24, 2024 | ransomware_live | — |
| modplan.co.uk | October 24, 2024 | ransomware_live | — |
| pkaufmann.com | October 24, 2024 | ransomware_live | — |
| mgfsourcing.com | October 23, 2024 | ransomware_live | — |
| www.northernsafety.com | October 23, 2024 | ransomware_live | — |
| thompsoncreek.com | October 23, 2024 | ransomware_live | — |
| nanolive.ch | October 21, 2024 | ransomware_live | — |
| Susan Fischgrund | October 21, 2024 | ransomware_live | — |
| Sandro Forte Financial Support | October 21, 2024 | ransomware_live | — |
| www.talonsolutions.co.uk | October 21, 2024 | ransomware_live | — |
| trans-logik.com | October 21, 2024 | ransomware_live | — |
| thebeautyclick.co.uk | October 21, 2024 | ransomware_live | — |
| robinhood.com | October 17, 2024 | ransomware_live | — |
| drizly.com | October 17, 2024 | ransomware_live | — |
| filmai.in | October 17, 2024 | ransomware_live | — |
| appen.com | October 17, 2024 | ransomware_live | — |
| www.legilog.fr | October 8, 2024 | ransomware_live | — |
| legilog.fr | October 8, 2024 | ransomware_live | — |
| northernsafety.com | September 16, 2024 | ransomware_live | — |
| rylandpeters.com | August 22, 2024 | ransomware_live | — |
| globacap.com | August 21, 2024 | ransomware_live | — |
| www.pindrophearing.co.uk | August 21, 2024 | ransomware_live | — |
| sfr.fr | July 12, 2024 | ransomware_live | — |
| www.gannons.co.uk | June 14, 2024 | ransomware_live | — |
| www.bigalsfoodservice.co.uk | June 13, 2024 | ransomware_live | — |
| Borrer Executive Search | June 13, 2024 | ransomware_live | — |
| AMI Global Assistance | June 12, 2024 | ransomware_live | — |
| AlphaNovaCapital | June 12, 2024 | ransomware_live | — |
| apex.uk.net | June 12, 2024 | ransomware_live | — |
| brightwayconsultants.co.uk | May 23, 2024 | ransomware_live | — |
| fortify.pro | May 8, 2024 | ransomware_live | — |
| melting-mind.de | May 3, 2024 | ransomware_live | — |
| www.credio.eu | May 2, 2024 | ransomware_live | — |
| www.servicepower.com | May 2, 2024 | ransomware_live | — |
| www.trifecta.com | April 5, 2024 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).